Wi-Fi and VPN setup help, from the router's admin page out.

Most home routers still run the admin password printed on the sticker and firmware from the year they were plugged in.

We start there. New admin password, stored where you keep passwords, not on a sticky note. Firmware updated from the maker's own page. Remote administration from the internet switched off, and UPnP off unless a game console or a camera genuinely needs it. WPS off, because nobody uses the button and it is a known weak point.

Then the Wi-Fi itself. WPA3 where every device supports it, WPA2/WPA3 mixed where an old printer does not. One network name for 2.4 and 5 GHz on mesh systems so devices roam, separate names on single routers when a smart plug refuses to join a combined one. A guest network for visitors and anything with “smart” in the product name, isolated from the computers.

We cannot walk your house. What we can do is read the numbers. The mesh app reports the backhaul signal between nodes, and a laptop on the far desk reports its own signal strength and link rate. Under about -70 dBm the node is too far away. Above -50 dBm it is too close and adds little. We ask you to move a node one room at a time and watch the figure change while we stay connected.

The usual mistakes are simple. A node on the floor behind a sofa. A node inside a cabinet. The main router in a closet at one end of the house because that is where the cable comes in. Two walls of brick or one bathroom full of tiles and pipes between nodes. Where the house allows it, a wired backhaul over ethernet beats any wireless placement; we tell you which port to use.

• Nodes at desk height or higher, in the open, roughly halfway between the router and the dead zone.
• Channel width and channel set by hand when a neighbour's network sits on the same one.
• A speed test from the work laptop before and after, so the change shows as a number.

Your employer or client gives you a VPN and a page of instructions written for someone else's laptop. We install the client they specify, import the profile, and connect. Clients we set up most: Cisco Secure Client (AnyConnect), FortiClient, GlobalProtect, WireGuard, OpenVPN Connect, and the built-in Windows and macOS IKEv2 options. For a small office we can configure WireGuard on a router that supports it, so two or three remote staff reach the office file share.

The failure we see most is not the VPN. It is a home network on 192.168.1.0/24 and an office network on the same range, so the laptop cannot tell which printer you mean. Changing the home router's LAN range to something like 192.168.50.0/24 fixes it in five minutes.

If the router's own status page shows the internet dropping, no setting fixes that. That is the provider's line or modem, and we tell you what to quote when you call them: the times of the drops, the signal levels from the modem page, and the uptime counter resetting. A router that reboots by itself, runs hot or has a dead port is hardware. We say so inside the first ten minutes and stop the clock with no fee for that session. That is how we work, not a promise about the router.